381 sourced profiles · 5 path studies
How security leaders reach the seat.
CISO Spotlights publishes career profiles of chief information security officers, built only from company announcements, official biographies, government pages and established trade press. Every fact carries its source.
In the spotlight
Mike Hanley
Vice President and Chief Information Security Officer, General Motors
Featured profiles
All 381 →
Dane Stuckey
Co-Chief Information Security Officer
OpenAI
Connie Devine
Chief Information Security Officer
Phillips 66
Chris Gergen
Chief Information Security Officer
North Dakota Information Technology (NDIT)
Dave MacKinnon
Vice President, Technology Infrastructure and Chief Information Security Officer
JetBlue
Chris Hodson
Chief Security Officer
Cyberhaven
Devon Bryan
Global Chief Security Officer
Booking Holdings
Shaun Khalfan
Senior Vice President & Chief Information Security Officer
PayPal
James Sipe
Executive Deputy Chief Information Officer
Commonwealth of Pennsylvania
Andrew Rose
Chief Security Officer
SoSafe
Jaya Baloo
COO & CISO
AISLE
Path studies
Path study: October 2026
Repeat CISOs and vendor-side paths lead October 2026's 12 profiled appointments
October 2026 path study: 10 of 12 profiled appointments were repeat CISOs and 8 had vendor-side backgrounds. Counts by path, sector and title, with sourced passages.
Path study: September 2026
Vendor-side and repeat CISO paths tie at 14 of 27 profiled in September 2026
September 2026 path study: 27 profiled CISO appointments, with vendor-side and repeat-CISO paths each at 14, plus sector and title counts, from sourced profiles.
Path study 03
Builders in the chair: the engineers, researchers and product people who became CISOs
Eleven profiled CISOs came up through hands-on technical work: software and security engineering, malware research, breach analysis, product and infrastructure.
Guides
All 68 →
Dark web and stolen-credential threat intelligence: what Hold Security's work shows CISOs
How Hold Security says it tracks breached data and dark-web actors, what its research reports, and what its CISO's webinars say leaders should focus on.
Vendor to enterprise: Dave MacKinnon's move from N-able CSO to JetBlue CISO
Three primary documents trace Dave MacKinnon's path from N-able chief security officer to JetBlue CISO, and how resilience entered the framing of his work.
The higher education CISO role inside a research university: Stanford's Amy Steagall
How Stanford's CISO is positioned in University IT, what her office covers, the military background she brought, and the priorities she has described.
Who the CISO reports to
All 7 →A growing record of the security function's reporting line at individual companies, exactly as each company's own 10-K Item 1C disclosure states it.
How long has the CISO held the seat?
All 5 →A growing record of how long each company's named Chief Information Security Officer has held the role, exactly as its most recent Form 10-K states it.
Which boards name a cybersecurity expert?
All 15 →A growing record of companies whose own proxy statement names a director as having cybersecurity expertise — voluntary, since the SEC dropped that disclosure requirement from its final 2023 cybersecurity rule.
Who is covering the seat while it's vacant?
All 35 →A growing record of companies whose own SEC filing names an interim or acting Chief Information Security Officer covering the seat during a search. A market data point, not commentary on why a seat is vacant.